1012609-ldap-roles - properly remove and reload roles from ldap user